01 · Record · Open source
A record no agent can rewrite.
SDKs for the Claude Agent SDK, OpenAI Agents SDK, LangChain and LangGraph, in Python and TypeScript, capture every model call, tool call, handoff and memory read or write. A proxy on agentgateway records each MCP and A2A call. Every event is signed at the first hop outside the agent and chained into an append-only log.
- Agents never hold a signing key
- Credentials stripped before signing
- Traces stitched across agents and memory
- ✓ signed by proxyagent_messagesupport → researchwhat does the refund policy say?
- ✓ signed by proxytool_callresearchweb.fetch /refund-policy
- ✓ signed by collectormodel_callresearchsummarize the policy
- ✓ signed by collectormemory_writesupportnotes/order-1042
- ✓ signed by proxyagent_messagesupport → billingissue the refund
- ✓ signed by collectortool_callbillingpayments.refund $500
$
02 · Stop · Wake Platform
Stop the fleet, and know it stopped.
Halt the whole fleet, chosen agents, one sub-agent or a single token. The brake runs on Temporal, outside your agents, pulls every lever at once, then checks that each one took. A path it can't confirm stays live, so a halt never reads as stopped too soon.
- Verified, not assumed
- Fails closed
- Durable workflows on Temporal
- Proxy denylivepulled…✓ confirmedevery agent
- Token revocationlivepulled…✓ confirmeddelegated tokens
- Okta sign-outlivepulled…✓ confirmedsupport
- Entra disablelivepulled…✓ confirmedresearch
- Google Cloud disablelivepulled…✓ confirmednotify
- AWS role denylivepulled…✓ confirmedbilling
- GitHub App suspensionlivepulled…✓ confirmedinstallation
- E2B sandbox freezelivepulled…✓ confirmedbilling's sandbox
stopped, every path confirmed · 0 live
$
The proxy deny is proven end to end. The other levers are built to each vendor's API and so far tested against stand-ins.
03 · Prove · Wake Platform
Evidence you can check yourself.
The log is append-only and signed, and anyone can verify all of it with the open source wake-log, without trusting Wake or whoever stores it. The evidence pack maps what you recorded to OWASP Agentic Top 10 risks and EU AI Act Articles 12, 14 and 15.
- Risk signals that page a human first
- Secrets and personal data flagged as they cross agents
- Every status rests on your own record
$ wake-log verify
- ✓ validcheckpoint signature
- ✓ includedevery entry in the signed tree
- ✓ validevery event's signature and payload
- signed checkpoints
- risk signals
- OWASP Agentic Top 10
- EU AI Act Art. 12, 14, 15
$
04 · Contain · Wake Platform
See everything downstream. Then contain it.
Flow rules at the proxy keep content from an untrusted source, such as a page an agent fetched or another agent's message, from triggering a privileged call like a payment. Start from a compromised agent, a poisoned memory entry or a single event, and see every agent, memory write and action that followed. Wake drafts the halts and quarantines that would cover it, gates and rolls back memory writes, and replays a flow policy over what was recorded.
- Origin labels follow data across agents
- Flow rules at the proxy
- SIEM export as JSON or CEF
- refund-policy pageorigin
- └─ researchhaltagent
- └─ supporthaltagent
- ├─ notes/order-1042quarantinememory
- ├─ billinghaltagent
- │ └─ payments.refund $500action
- └─ notifyhaltagent
- └─ email.sendaction
$